Privacy Policy
1. Purpose of this privacy policy
This Privacy Policy describes how Swiss Firmup collects, uses, stores and protects the personal data of its users when they access its services, create an account, take part in the evaluation programs or use the website www.swissfirmup.com.
It applies to all processing carried out by Swiss Firmup and aims to guarantee transparency in line with the requirements of the Swiss Federal Act on Data Protection (FADP) and, for users located in the European Union, the General Data Protection Regulation (GDPR).
Swiss Firmup may update this Privacy Policy to reflect changes in its practices or legal obligations. The applicable version is the one published on the site at the time of your visit.
2. Identity of the data controller
The controller responsible for the collection and processing of personal data is:
Arcadia Sàrl, Avenue des Mayennets 5, 1950 Sion (VS), Switzerland
For any question relating to data processing or the exercise of your rights, you can contact: info@swissfirmup.com
3. Categories of personal data collected
Swiss Firmup collects only the data necessary for the operation of its services and for compliance with its legal obligations. The data processed comes either directly from the user or from automatic collection during use of the site.
Data provided voluntarily when creating an account, registering for a program, or in exchanges with Swiss Firmup:
- First and last name
- E-mail address
- Postal address and country of residence
- Login information and identifiers
- Data related to the evaluation and trading programs
- Any other information provided in connection with use of the services
- Contractual data
Technical data that may be recorded automatically while browsing:
- IP address
- Device type, operating system and browser
- Log data, timestamps and pages visited
- Site or platform usage information
- Technical settings and preferences
This data is necessary to ensure the security, performance and continuous improvement of the services offered by Swiss Firmup.
4. Purposes of data processing
Swiss Firmup processes users' personal data only for the purposes necessary for the operation of its services and for compliance with its legal obligations:
- Management of user accounts, creation, administration and securing of accounts; identity verification and abuse prevention
- Provision of the evaluation and trading programs, access to the programs, performance tracking, management of interactions related to trading activities
- Billing and communication, payment processing, sending contractual, technical or administrative information, handling requests addressed to support
- Service improvement, analysis of usage behaviour, optimization of features, development of new services
- Legal compliance and regulatory obligations, fraud prevention, compliance with retention obligations, response to legitimate requests from the authorities
The data is never used for purposes incompatible with these objectives.
5. Legal basis for processing
Swiss Firmup processes personal data on the following legal bases, in accordance with the FADP and, for EU users, the GDPR:
- Performance of a contract: management of the user account, access to the programs and provision of the services.
- Legal obligations: data retention, abuse prevention, responses to the authorities.
- Legitimate interest: platform improvement, security, internal statistics.
- Consent: where required, in particular for certain cookies or marketing communications.
Where processing is based on your consent, you may withdraw it at any time, without retroactive effect, by contacting Swiss Firmup at the address indicated in article 13.
6. Sharing and disclosure of data
Swiss Firmup does not sell, rent or monetize any personal data of its users.
Swiss Firmup works with service providers in Switzerland and abroad who process data about you on our behalf or jointly with us, or who receive data about you from us under their own responsibility.
Data may be transmitted only to the following categories of recipients, to the extent necessary:
Technical service providers
- Hosting
- IT maintenance
- Performance analysis
These providers act on the instructions of Swiss Firmup. In practice, Swiss Firmup notably relies on the following processors:
- SiteGround — website hosting (EU)
- Stape (Stape Europe) — audience-measurement server (France)
- Google Ireland Ltd. — audience measurement and advertising (EU, with transfers to the United States)
- Contentsquare SAS — navigation analysis (France)
- Cloudflare — anti-spam and abuse protection (EU / United States)
- Stripe — payment processing (EU / United States)
Partners linked to trading activities
- Program access providers
- Technical platforms required to deliver the services
Legal or regulatory authorities
Swiss Firmup may be required to disclose certain personal data to administrative, tax, judicial or regulatory authorities where the law requires it or where a formal request is addressed to the company. Such disclosure may occur, for example, in the context of an official investigation, civil or criminal proceedings, a duty to cooperate provided for by a legal rule, or where it is necessary to protect the rights, safety or legitimate interests of Swiss Firmup or of third parties.
In all cases, Swiss Firmup ensures that the authorities receiving the data process it in accordance with the applicable legal provisions and use the information only for the purposes provided for by the procedure or regulation concerned. Where possible, Swiss Firmup informs the user of the disclosure, unless a legal prohibition or an official instruction prevents it from doing so.
7. Data transfers outside Switzerland / the EU
Swiss Firmup may transfer certain personal data to service providers or partners located outside Switzerland and the European Union. Such transfers take place exclusively where necessary for the technical operation of the services or for the implementation of the evaluation and trading programs.
Where data is transferred to a country that does not offer a level of data protection deemed adequate, Swiss Firmup puts appropriate safeguards in place, such as recognized standard contractual clauses, to ensure that the processing carried out abroad complies with the requirements of the applicable legislation. By using the services, the user acknowledges that certain data flows are inherent to the operation of the Internet and may transit through third countries even where the sender and the recipient are located in the same region.
In particular, some browsing data passes through a measurement server located in France (Stape Europe), and may be transferred to the United States as part of its processing by Google Ireland Ltd. These transfers rely on the European Union's standard contractual clauses, the EU-US Data Privacy Framework, and the safeguards provided under Swiss law.
8. Data retention period
Swiss Firmup retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy. Information linked to user accounts is kept as long as the account remains active. When an account becomes inactive, the associated data is kept for a maximum period of twenty-four months and then deleted or anonymized in accordance with current security standards.
Certain data may be kept longer where legal retention obligations so require or where legitimate interests, such as the prevention of abuse or the management of potential disputes, justify it. Once these periods have expired, the data is permanently erased or anonymized.
9. Data security and technical measures
Swiss Firmup implements appropriate technical and organizational measures to protect personal data against unauthorized access, misuse, loss, alteration, disclosure or destruction. Depending on the case, these measures may include encryption mechanisms, firewall systems, access controls and strict internal management of authorizations.
Despite these precautions, no computer system can offer absolute security. The user acknowledges that use of the Internet involves certain inherent risks and that the transmission of information online can never be entirely secure.
10. User rights
In accordance with the FADP and, for users located in the European Union, the GDPR, every user has rights in relation to the processing of their personal data. In particular, the user may ask whether Swiss Firmup processes data concerning them and obtain information on the nature of the data processed, its origins, the purposes of the processing, the categories of recipients and, where applicable, the intended retention period. The user may also request the rectification of inaccurate or incomplete data, request the erasure of data where its processing is no longer necessary or is based exclusively on their consent, demand the temporary restriction of processing in the cases provided for by law, or object to certain processing based on a legitimate interest where their particular situation justifies it. Where processing is based on consent or on the performance of a contract and the applicable legislation so provides, the user may also request the transmission of certain data in a structured electronic format (portability).
Where the processing of certain data is based on the user's consent, the user may withdraw that consent at any time, without retroactive effect, by contacting Swiss Firmup at the contact details indicated in article 13. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal and may, depending on the case, limit access to certain services or features.
To exercise their rights, the user must send their request to Swiss Firmup at the contact details mentioned in article 13, clearly describing the right they wish to exercise. Swiss Firmup may request appropriate proof of identity in order to prevent abuse or unauthorized access to data. Requests are handled as quickly as possible and in accordance with the applicable legal requirements.
The rights described in this article may be subject to certain restrictions or exceptions provided for by the legislation in force, in particular where the processing of data remains necessary to comply with a legal obligation, to safeguard overriding interests, to protect the rights of third parties or to establish, exercise or defend legal claims. Where Swiss Firmup cannot fully grant a request, the user is informed of this and of the reasons for the limitation, to the extent permitted by law.
If a user considers that the processing of their personal data does not comply with the FADP or, where applicable, the GDPR, they may inform Swiss Firmup and also have the right to lodge a complaint with the competent supervisory authority. In Switzerland, the supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC). Users located in the European Union may contact the supervisory authority of their Member State of habitual residence or of the place of the alleged infringement.
11. Cookies and similar technologies
The Swiss Firmup site uses cookies and other comparable technologies to ensure its proper functioning, improve the user experience, measure audience and adapt certain features. On their first visit, the user is informed of the use of these technologies and may accept or refuse certain types of cookies via the options available in the information banner or in their browser settings.
Cookies necessary for the operation of the site generally cannot be disabled, as they guarantee essential features such as navigation, security or access to the user account. Cookies intended for analytics, personalization or performance are activated only if the user consents to them. Browser settings may also be used to limit or block certain elements.
Server-side audience measurement
Browsing data collected on the site is first routed to a measurement server operated by Stape (Stape Europe), hosted in France. This server acts as a processor, on the instructions of Swiss Firmup.
Depending on the consent choices made by the user via the cookie banner, this data may then be forwarded to third-party measurement or advertising tools, such as Google. This transmission only occurs after the user's prior consent; in the absence of consent, it does not take place.
Cookies used
- ft_consent — stores the user's consent choice — necessary — 180 days
- FPID — measurement identifier set by our measurement server (rather than directly by the browser); contains no directly identifying data — audience measurement — 2 years
- _ga, _ga_* — visitor distinction (Google Analytics 4) — audience measurement — 2 years
- _gcl_* — advertising click attribution (Google Ads) — marketing — 90 days
Anti-spam protection (Cloudflare Turnstile)
This site is protected by Cloudflare Turnstile to prevent spam and abuse. Turnstile operates invisibly, without any checkbox or visible puzzle. Cloudflare processes limited technical data (such as IP address and browser information) to distinguish humans from bots. This data is not used for advertising purposes. For more details, please consult the Cloudflare Turnstile privacy addendum.
12. Changes to this privacy policy
Swiss Firmup may update this Privacy Policy to reflect legal, technical or operational developments. Any substantial change will be published on the website and, where appropriate, communicated directly to the user by e-mail or via their personal area. The applicable Privacy Policy is always the one available online at the time the services are used.
13. Contact
For any question relating to the processing of personal data or to exercise any of the rights mentioned in this Privacy Policy, the user may contact Swiss Firmup at the following address:
Arcadia Sàrl
E-mail: info@swissfirmup.com
Swiss Firmup will endeavour to respond to requests as quickly as possible and in accordance with the legal requirements applicable to data protection.